Search for packages
| purl | pkg:maven/org.hibernate/hibernate-core@5.5.0.Alpha1 |
| Next non-vulnerable version | 6.0.0.Alpha2 |
| Latest non-vulnerable version | 6.0.0.Alpha2 |
| Risk | 4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-qqu7-yqc6-rqab
Aliases: CVE-2026-0603 GHSA-2p5w-cvg5-gc5c |
org.hibernate/hibernate-core: Hibernate: Information disclosure and data deletion via second-order SQL injection |
Affected by 0 other vulnerabilities. |
|
VCID-qxnf-qs7c-4fby
Aliases: CVE-2019-14900 GHSA-8grg-q944-cch5 |
SQL Injection in Hibernate ORM A flaw was found in Hibernate ORM in versions before 5.3.18, 5.4.18 and 5.5.0.Beta1. A SQL injection in the implementation of the JPA Criteria API can permit unsanitized literals when a literal is used in the SELECT or GROUP BY parts of the query. This flaw could allow an attacker to access unauthorized information or possibly conduct further attacks. |
Affected by 1 other vulnerability. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||